Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94f61414-1e66-4f60-a04a-9ee86821a65c.roa
File:                     94f61414-1e66-4f60-a04a-9ee86821a65c.roa (raw, json)
Hash identifier:          AP6NAhFv/H+XtKVNYH2PxDtCrs4EciTzuEXSDnWNZ6Q=
Subject key identifier:   C6:F2:73:F2:B8:E5:CB:95:3F:3C:FB:60:B5:4F:B8:8A:5A:0B:CB:93
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3524EE0FF2AE68870F6BBD641BD2FAD5871D7CDF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94f61414-1e66-4f60-a04a-9ee86821a65c.roa
Signing time:             Tue 05 Nov 2024 00:00:00 +0000
ROA not before:           Tue 05 Nov 2024 00:00:00 +0000
ROA not after:            Tue 10 Dec 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        129.235.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:24:ee:0f:f2:ae:68:87:0f:6b:bd:64:1b:d2:fa:d5:87:1d:7c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  5 00:00:00 2024 GMT
            Not After : Dec 10 23:59:59 2024 GMT
        Subject: serialNumber=f6671ff54dfb4c0331b95f2e41a548fb5065ba705e399de894db654249e2cf16, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a3:75:bd:24:9d:00:5d:e7:ea:05:a2:21:60:
                    9e:30:40:a9:56:b6:07:cf:df:36:23:8e:f7:a8:05:
                    8e:fb:74:5f:91:06:7c:2c:27:3c:4c:2e:6c:90:38:
                    06:67:52:6c:f0:0b:df:e6:a7:6f:79:82:95:d0:8c:
                    d7:09:b1:20:0c:e5:ab:6f:57:74:fb:2e:15:68:cf:
                    33:5f:4a:b1:31:61:f9:41:00:88:10:92:6d:76:c3:
                    66:e6:af:e3:b2:d3:2a:4e:89:5d:ce:3e:d9:1d:79:
                    b5:02:3a:bd:f1:99:c7:26:98:92:cf:5e:64:b1:eb:
                    0f:1e:3d:ee:87:de:de:94:3d:57:e2:0f:03:d0:12:
                    12:9d:18:86:d4:e1:e1:58:02:cd:7c:10:b2:a1:0f:
                    e1:4e:37:5c:97:5a:88:3c:ec:bb:58:ea:82:6a:17:
                    5d:4b:58:3d:15:f2:10:46:30:b3:ae:c5:fa:22:22:
                    07:be:c5:55:64:63:89:a0:cd:d8:88:6a:ac:6f:84:
                    2e:14:3b:32:22:84:c7:98:b2:be:05:5a:39:8a:5e:
                    be:57:00:78:08:da:fa:ef:c3:7a:4b:cc:ef:ec:59:
                    72:48:d1:5a:99:49:cd:20:6a:0b:55:a8:bc:e8:00:
                    43:bd:ec:eb:18:24:c7:b5:60:a0:90:ff:ac:3e:d5:
                    4a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F2:73:F2:B8:E5:CB:95:3F:3C:FB:60:B5:4F:B8:8A:5A:0B:CB:93
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94f61414-1e66-4f60-a04a-9ee86821a65c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.235.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b8:db:de:68:ae:3e:97:b3:f7:c5:01:b3:d9:fa:c8:87:89:20:
         59:55:dd:e4:16:20:11:6a:19:04:88:1e:77:22:d7:a2:d7:82:
         29:91:c9:3a:b6:13:6d:a3:82:0a:8c:5a:7a:ef:1e:f1:1a:2a:
         a6:e3:47:6e:64:c6:c4:b8:60:5b:66:51:d9:4c:1d:52:01:d0:
         e5:91:0f:52:b1:04:22:68:a5:9e:15:49:6b:b2:a6:44:1c:fa:
         d0:dc:4a:2b:20:1c:2b:8e:7e:88:90:47:50:3e:77:ac:51:2b:
         c4:7c:14:ec:01:90:9c:2b:95:37:c3:fc:82:43:57:ea:3b:3d:
         64:bc:77:61:75:4e:23:35:3d:cd:be:11:12:66:23:76:e1:f1:
         d2:69:3c:58:13:dd:05:a9:09:e7:13:e0:02:cb:ef:89:40:2f:
         6c:07:d0:9d:69:2b:e9:09:30:05:bc:aa:00:8b:f6:3d:32:98:
         c5:5e:14:10:59:4d:13:dc:5b:b3:92:be:22:8f:a8:2b:a5:88:
         fa:66:69:ff:2b:9e:00:1a:2d:ed:cb:f1:27:db:56:11:c0:5a:
         63:f1:97:80:e4:7d:1a:95:c6:92:4c:18:71:34:35:e2:d8:66:
         a6:83:95:2a:f7:b0:e4:96:df:e0:65:a3:4b:7d:73:1f:21:01:
         b2:b6:22:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:56 2024 by rpki-client on console-ams.rpki-client.org